Run Rubeus via Rundll32
☆214Apr 25, 2020Updated 6 years ago
Alternatives and similar repositories for Rubeus-Rundll32
Users that are interested in Rubeus-Rundll32 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- GhostBuild is a collection of simple MSBuild launchers for various GhostPack/.NET projects☆253Sep 26, 2020Updated 6 years ago
- Check if MS-RPRN is remotely available with powershell/c#☆184Oct 21, 2018Updated 8 years ago
- DAFT: Database Audit Framework & Toolkit☆184Aug 11, 2021Updated 5 years ago
- Evil SQL Client (ESC) is an interactive .NET SQL console client with enhanced SQL Server discovery, access, and data exfiltration feature…☆306Apr 25, 2023Updated 3 years ago
- .NET 4.0 WinRM API Command Execution☆165Sep 11, 2020Updated 6 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- MSBuild Without MSBuild.exe☆155Dec 21, 2020Updated 5 years ago
- Fileless lateral movement tool that relies on ChangeServiceConfigA to run command☆1,677Jul 10, 2023Updated 3 years ago
- Extracts all base64 ticket data from a rubeus /dump file and converts the tickets to ccache files for easy use with other tools.☆67Oct 3, 2020Updated 6 years ago
- .NET Project for performing Authenticated Remote Execution☆410Feb 8, 2023Updated 3 years ago
- Remote Desktop Protocol .NET Console Application for Authenticated Command Execution☆1,176Aug 3, 2026Updated 2 months ago
- Using DInvoke to patch AMSI.dll in order to bypass AMSI detections triggered when loading .NET tradecraft via Assembly.Load().☆216Mar 5, 2020Updated 6 years ago
- Port of Invoke-Excel4DCOM☆101Oct 12, 2019Updated 7 years ago
- .Net Assembly to block ETW telemetry in current process☆78May 14, 2020Updated 6 years ago
- Send and receive messages over Named Pipes asynchronously.☆39Sep 17, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Create a minidump of the LSASS process from memory☆257Nov 2, 2022Updated 3 years ago
- Asynchronous Password Spraying Tool in C# for Windows Environments☆318Dec 19, 2023Updated 2 years ago
- ☆54Apr 27, 2019Updated 7 years ago
- OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at s…☆544Sep 18, 2022Updated 4 years ago
- Miscellaneous Tools☆270Oct 29, 2020Updated 6 years ago
- Loads any C# binary in mem, patching AMSI + ETW.☆856Oct 3, 2021Updated 5 years ago
- .Net port of the remote SAM + LSA Secrets dumping functionality of impacket's secretsdump.py☆614Feb 16, 2023Updated 3 years ago
- ☆171Dec 8, 2022Updated 3 years ago
- A Cobalt Strike tool to audit Active Directory user accounts for weak, well known or easy guessable passwords.☆441Apr 1, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- SharpGen is a .NET Core console application that utilizes the Rosyln C# compiler to quickly cross-compile .NET Framework console applica…☆302Apr 23, 2021Updated 5 years ago
- Fork of SafetyKatz that dynamically fetches the latest pre-compiled release of Mimikatz directly from gentilkiwi GitHub repo, runtime pat…☆887Mar 29, 2021Updated 5 years ago
- This tool enables the compilation of a C# program that will execute arbitrary PowerShell code, without launching PowerShell processes thr…☆192Jul 26, 2020Updated 6 years ago
- Spray a hash via smb to check for local administrator access☆143Feb 7, 2021Updated 5 years ago
- BadAssMacros - C# based automated Malicous Macro Generator.☆446Jan 8, 2022Updated 4 years ago
- PoC to demonstrate how CLR ETW events can be tampered.☆187Mar 26, 2020Updated 6 years ago
- ☆98Sep 20, 2021Updated 5 years ago
- ☆359Apr 24, 2021Updated 5 years ago
- A C# implementation of PrivExchange by @_dirkjan.☆155Mar 15, 2019Updated 7 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- MSBuild without MSbuild.exe☆134Dec 21, 2020Updated 5 years ago
- Vampire is an aggressor script which integrates with BloodHound to mark nodes as owned.☆78Apr 6, 2021Updated 5 years ago
- SharpCompile is an aggressor script for Cobalt Strike which allows you to compile and execute C# in realtime. This is a more slick approa…☆288Aug 7, 2020Updated 6 years ago
- ☆351Feb 21, 2022Updated 4 years ago
- .NET Project for Attacking vCenter☆558Nov 11, 2021Updated 4 years ago
- Also known by Microsoft as Knifecoat☆1,145Dec 22, 2022Updated 3 years ago
- ☆1,536Aug 11, 2023Updated 3 years ago